azalea/kotlin-fork
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove *.spdx.json.md5 and *.spdx.json.sha1 from reproducible file

Browse Source
This commit is contained in:
Nikolay Krasko
2023-06-15 10:38:33 +02:00
committed by Space Team
parent d5bdc7cf8e
commit 58d9727092
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/build-kotlin-maven.sh
+1 -1
View File
@@ -51,7 +51,7 @@ cp -R build/repo/. build/repo-reproducible
# maven-metadata contains lastUpdated section with the build time
find build/repo-reproducible -name "maven-metadata.xml*" -exec rm -rf {} \;
# spdx SBOM contains creationInfo with datetime
find build/repo-reproducible -name "*.spdx.json" -exec rm -rf {} \;
find build/repo-reproducible -name "*.spdx.json*" -exec rm -rf {} \;
# Each file has own timestamp that would affect zip file hash if not aligned
find build/repo-reproducible -exec touch -t "198001010000" {} \;
cd build/repo-reproducible && find . -type f | sort | zip -X reproducible-maven-$DEPLOY_VERSION.zip -@ && cd -